From 74189d6e5380c26b5735acc81f7599906ec23745 Mon Sep 17 00:00:00 2001 From: Patrick McHardy Date: Mon, 28 Dec 2009 15:48:11 +0100 Subject: [PATCH] dect: csf: fix static system information slotnumber range check Valid values are 0-11. Signed-off-by: Patrick McHardy --- drivers/dect/coa/radio_u2785.c | 2 +- net/dect/mac_csf.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/dect/coa/radio_u2785.c b/drivers/dect/coa/radio_u2785.c index de0be468d76..dab53a01011 100644 --- a/drivers/dect/coa/radio_u2785.c +++ b/drivers/dect/coa/radio_u2785.c @@ -8,7 +8,7 @@ * Copyright (c) 2009 Patrick McHardy */ -#define DEBUG +//#define DEBUG #include #include #include diff --git a/net/dect/mac_csf.c b/net/dect/mac_csf.c index 3ed436a9b3e..b4a7594b07b 100644 --- a/net/dect/mac_csf.c +++ b/net/dect/mac_csf.c @@ -769,7 +769,7 @@ static int dect_parse_bearer_description(struct dect_tail_msg *tm, u64 t) bd->sn = (t & DECT_PT_BEARER_SN_MASK) >> DECT_PT_BEARER_SN_SHIFT; bd->sp = (t & DECT_PT_BEARER_SP_MASK) >> DECT_PT_BEARER_SP_SHIFT; bd->cn = (t & DECT_PT_BEARER_CN_MASK) >> DECT_PT_BEARER_CN_SHIFT; - if (bd->sn > DECT_FRAME_SIZE) + if (bd->sn >= DECT_HALF_FRAME_SIZE) return -1; tm->type = DECT_TM_TYPE_BD;